469 matches found
CVE-2025-66325
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-66325
CVE-2025-66325 affects Huawei HarmonyOS/EMUI, originating from improper control of package management privileges in the package management module. The vulnerability could lead to unauthorized access affecting service confidentiality. Connected sources (CNVD/CNNVD/RH/NVD) corroborate the privilege...
CVE-2025-66325
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
EUVD-2025-201675
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-66325
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...
PT-2025-49532
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Adobe Experience Manager (AEM) CRX Package Manager Panel Detected
This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...
Malicious Package
Overview @shr3k/tdspt-helper-ng is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious code in steganography-aether-on-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a82bcf9484d0efd576c49a8f70274e7b0f9d424b9ac8f7f2c024d1aa3911a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185742 Malicious code in balance-char-byte-final-big (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817e865ae1c8a984187cb4dbd722f2a15ab88822dc1ff846b8b0644a317fdc6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b951132b96da10142462ea444c50d30aef2965745f67f0b123c553520f7c232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187970 Malicious code in meissa-hermes-callisto-sails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b633dc83b81fa2bf2811bca79ee36d4afe31a1d5a5ca8d3cb8a5bf01364c7dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in item-ati-labiomizaa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14642c84ee23eedc4862e92c53d66288e02204231e85a0e88766f2b2f1eca8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-184984 Malicious code in sonic-kig-tiav (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5431f41cf3c763e3ba5c74b15f15863658d85189783db3f4df39f08cfb6eff27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-182805 Malicious code in itale-adci-akonolki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821ce9edf45994bcd34969f68a4bf3bbdd374c5c4e3a320437b81aac48de04ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cewe15 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754386d1ec218acd5a10fa7f9e00cc8099ca5127ca3d3dfa0829694ef1b6b9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-179862 Malicious code in lookingan-jaja82 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74085e43de1498da9bf4b39aeb8e2ce3128f5fbd2afefd847c92af07c4383595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in anak-jalanan-mdn34 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc797bd07db0f9f91442024db4f6ea40639f7743bc8466dca68d9b48fd7be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...